Director of Cloud infrastructure and security

Academic Key; Berlin; Hybride; EUR 150 000 - 190 000; Plein temps

Résumé du poste

Vestiaire Collective is seeking a Director of Cloud Infrastructure and Security to lead a two-team group focused on Cloud Infra and Security. This hands-on director role combines strategy with direct architecture, incidents, and delivery responsibilities.

You will own reliability, cost‑efficiency and security posture across production environments, influencing platform modernization and AI-enabled engineering across the business.

Responsabilités

• Lead, develop, and retain a small team of six across Cloud Infrastructure and Security.
• Define a joint roadmap for both teams aligned to business priorities.
• Establish KPIs, SLOs, risk metrics and report on reliability, cost and security.
• Set an operating model with guardrails and central ownership.
• OwnAWS and GCP footprint end-to-end: EKS, Vault, data stores, Cloudflare.
• Advance infrastructure-as-code maturity and GitOps adoption.
• Consolidate observability into a single source of truth for metrics/logs/traces.
• Improve developer experience with CI/CD, test environments, and delivery metrics.
• Lead FinOps and drive cost discipline across teams.
• Support platform modernization, runtime upgrades, and Kubernetes upgrades.
• Automate recurring requests and build AI-enabled engineering foundations.

Description du poste

Director of Cloud infrastructure and security

Abroad

Vestiaire Collective is the leading global online marketplace for desirable pre‑loved fashion. Our mission is to transform the fashion industry for a more sustainable future by empowering our community to promote the circular fashion movement. Vestiaire was founded in 2009 and is headquartered in Paris with offices in London, Berlin, New York, Singapore, Ho Chi Minh, and warehouses in Tourcoing (France), Crawley (UK), Hong Kong and New York. We currently have a diverse global team of 600 employees representing more than 50 nationalities. Our values are Activism, Transparency, Dedication and Greatness and Collective.

About the Role: Vestiaire Collective runs a global marketplace on AWS and GCP — Kubernetes, Kafka, Terraform, Vault, Cloudflare, Datadog, a large PHP application under active modernisation, a series of microservices in different tech stacks (Goland, PHP, Node) and a fast‑growing surface of AI‑powered services. As Director of Cloud Infrastructure and Security , you will lead a small team of six senior individual contributors across Cloud Infrastructure (DevOps/SRE) and Security. This is a hands‑on Director role : alongside setting the strategy and roadmap, you will work directly with the team on architecture, technical decisions, incidents and delivery. You will be accountable, alongside Product Development teams, for the reliability, cost‑efficiency and security posture of everything we run in production.

What you will do:

• Leadership across two teams: Directly lead, develop and retain a small team of six (6) experienced engineers across Cloud Infrastructure and Security. This is a player‑coach role without multiple management layers, so you will remain close to the team’s technical work and day‑to‑day priorities.
• Define a joint roadmap for both teams, aligned to business priorities and risk appetite, and make explicit calls on what we will not do.
• Establish clear KPIs, SLOs and risk metrics, and report regularly to leadership on reliability, cost and security posture.
• Set the operating model: what product teams self‑serve behind guardrails versus what your teams own centrally. Foster a culture where reliability and security are shared accountabilities, not tickets thrown over a wall, including establishing a Security Champions model across engineering.
• Own our AWS and GCP footprint end to end: EKS, networking, secrets (Vault), data stores (RDS/Aurora, MSK, ElastiCache, MongoDB Atlas, OpenSearch) and the edge (Cloudflare).
• Establish real reliability engineering practice: SLOs and error budgets, capacity planning, and a business continuity plan.
• Drive infrastructure‑as‑code maturity: Automating Terraform change application, advancing our move to GitOps (ArgoCD), and enforcing guardrails at creation time with policy‑as‑code (Kyverno/OPA) so provisioning is safe, self‑serve and reviewable.
• Consolidate observability into a single source of truth for metrics, logs and traces.
• Improve developer experience and delivery throughput: CI/CD (Jenkins, GitHub Actions), paved roads, test environments on demand, and delivery metrics that hold up.
• Own FinOps: infrastructure cost per unit of business value, cost accountability pushed back to each team, and continued run‑rate reduction. Cost discipline is a first‑class objective.
• Support the modernisation of our core platform: Tech migrations, runtime and framework upgrades, and continuous database and Kubernetes upgrades.
• Attack toil systematically: automate the recurring requests, and hand safe self‑service back to product teams rather than absorbing the work.
• Grow the foundations for AI‑augmented engineering and operations.
• Own security strategy and posture across cloud, application, identity, detection and response, building and improving the governance: risk register, published roadmap, remediation SLAs, and a recurring reporting cadence for leadership.
• Strengthen cloud security posture management (CNAPP) and secure‑by‑default configurations across all environments.
• Improve embedding security into the SDLC and CI/CD: establish full static‑analysis and dependency‑scanning coverage with clear criteria for when critical findings block a release.
• Mature vulnerability management, penetration testing and our bug bounty program into one prioritised program with SLAs and aging reports that measurably reduce risk.
• Advance identity and access management toward least privilege and zero trust: automated provisioning from groups, and periodic access reviews.
• Mature logging, detection and incident response, closing SIEM coverage gaps.
• Set guardrails for safe AI adoption (shadow AI outside approved paths, data and prompt leakage, prompt injection, model abuse) and defend against AI‑enabled fraud and phishing.
• Ensure compliance with GDPR, PCI DSS v4, NIS2, and CIS v8, including a maintained, reusable evidence library rather than evidence gathered on request.
• Collaboration with legal and finance teams on compliance and for

Abroad Berlin Permanent contract